Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ntwv84Aa64QId8l9xpnr0bCsW24.roa
File: ntwv84Aa64QId8l9xpnr0bCsW24.roa (raw, json)
Hash identifier: hG69Pbji5eRDlELMsiUFfUC+GbL5leA2pyu4uCL8C04=
Subject key identifier: 9E:DC:2F:F3:80:1A:EB:84:08:77:C9:7D:C6:99:EB:D1:B0:AC:5B:6E
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348F4941D6D0B5B08168CD4C6A0BB06
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ntwv84Aa64QId8l9xpnr0bCsW24.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8611
IP address blocks: 195.251.232.0/22 maxlen: 22
83.212.204.0/22 maxlen: 22
195.251.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f4:94:1d:6d:0b:5b:08:16:8c:d4:c6:a0:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9edc2ff3801aeb840877c97dc699ebd1b0ac5b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:4c:19:2f:27:2a:78:c7:5c:fe:3a:c1:59:
47:88:56:50:70:e0:37:bd:ef:e6:fc:71:af:c5:fe:
d7:44:ac:08:c6:87:f9:f6:c8:92:8d:02:4e:8d:d4:
d2:86:b9:29:12:f1:d8:03:f4:0b:ec:e2:b2:1a:ed:
7a:6f:8c:dd:8a:e1:4b:33:14:c7:b3:dc:2a:c2:f8:
4d:f0:3a:c3:23:22:c5:84:db:0a:87:ad:be:04:ed:
1d:ab:45:01:15:d5:dc:01:02:56:8b:34:7f:a9:4b:
09:b7:bd:6e:25:93:45:6b:fd:cf:4c:33:57:40:80:
0f:48:f2:eb:df:c7:4f:b3:f9:61:43:9f:09:76:80:
83:ff:46:a6:c2:5e:08:ef:c7:3c:4b:47:b1:b8:9c:
e4:63:12:e5:d9:7a:90:bf:6b:8c:ab:89:a4:9d:c0:
63:13:64:7e:98:da:33:f2:5a:5d:6c:1a:c8:e5:46:
d9:c8:f4:57:aa:12:3e:fc:7e:f3:de:e7:0d:12:39:
b0:e2:7f:15:61:76:be:0f:6b:8e:4c:36:b0:a4:54:
0f:32:01:e4:c9:29:50:7a:7a:a3:5d:16:c8:71:39:
39:d7:cd:f8:af:a0:ae:a9:0b:9f:9a:62:85:42:99:
db:81:ef:3c:43:f3:cf:78:65:ff:cc:b2:95:3b:49:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DC:2F:F3:80:1A:EB:84:08:77:C9:7D:C6:99:EB:D1:B0:AC:5B:6E
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ntwv84Aa64QId8l9xpnr0bCsW24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.204.0/22
195.251.232.0/22
195.251.248.0/21
Signature Algorithm: sha256WithRSAEncryption
41:80:25:53:17:9b:1f:4a:0d:5c:44:19:0f:8c:48:d7:00:ed:
18:ae:01:ae:a4:24:7d:3b:7f:a4:bf:ba:5f:da:6d:40:c0:80:
b2:f2:26:2e:ae:f0:0b:76:ab:f7:fb:22:ca:85:3e:b7:43:2d:
a5:00:31:0b:25:fe:3d:b2:e2:c6:81:99:a9:e6:15:93:e7:8f:
2c:d9:ac:6c:74:04:b6:6d:49:9d:14:6b:8a:cc:c6:c9:02:d8:
f5:73:7c:42:42:4b:59:ee:07:65:a0:3f:70:3f:45:86:07:8b:
cb:63:ef:20:36:6e:92:cd:d1:17:71:4f:cf:15:df:c1:38:ea:
ab:02:d1:eb:45:94:d6:74:82:26:49:d6:27:58:54:71:c0:7f:
24:a5:cb:54:45:b0:9e:82:fe:3d:2a:e9:34:fc:e9:29:1d:d9:
d3:ba:08:56:5d:b3:48:9c:e3:99:9f:b8:a3:73:95:2b:e9:30:
74:c7:45:0e:61:7a:c5:34:9a:6d:4e:66:8f:95:ba:c7:6a:e5:
e1:f5:c0:32:08:11:1c:f2:c4:ae:0d:26:75:09:ad:0b:77:d7:
c7:ef:e2:ef:5f:12:39:ed:34:0d:8c:37:6b:f4:c5:37:c0:b2:
e8:b4:43:15:5c:ca:ae:3d:87:95:72:ce:47:95:04:16:c5:7d:
e3:9a:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:13 2024 by rpki-client on console-fra.rpki-client.org